last executing test programs:

50.869566889s ago: executing program 4 (id=528):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0x3)

50.866515329s ago: executing program 4 (id=530):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}})

50.777975432s ago: executing program 4 (id=535):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
getsockopt(r0, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51)

50.677124925s ago: executing program 4 (id=537):
syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1004000, &(0x7f0000000040)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000000440)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109049, 0x0)
mount$bpf(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x191a461, &(0x7f0000000040)=ANY=[])

50.225037769s ago: executing program 4 (id=543):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a78000000060a010400000000000000000200000038000480340001800a0001006d617463680000002400028008000100756470000e0003007acc6338a90000b03bd9000008000240000000000900010073797a30000000000900020073797a32000000001400058008000140f2000011080002"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

49.681994076s ago: executing program 4 (id=558):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@nobarrier}, {@discard_async}, {@ref_verify}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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")
lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@random={'btrfs.', '{\x00'})

49.681818167s ago: executing program 32 (id=558):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f00000000c0)='./file1\x00', 0x10, &(0x7f0000000040)={[{@nobarrier}, {@discard_async}, {@ref_verify}]}, 0x1, 0x559d, &(0x7f000000ac40)="$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")
lremovexattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=@random={'btrfs.', '{\x00'})

34.952054393s ago: executing program 2 (id=862):
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000100)=""/92, &(0x7f00000001c0)=0x11)

34.893382655s ago: executing program 2 (id=864):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000280)='\b', 0x1, 0x300c48dd, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @local}, 0x14)

34.633586603s ago: executing program 2 (id=870):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
syz_mount_image$hfs(&(0x7f0000000280), &(0x7f0000000200)='./file0\x00', 0x1214080, &(0x7f00000000c0)={[{@uid}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@gid}, {@part={'part', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@part={'part', 0x3d, 0x7ff}}, {@gid}]}, 0x1, 0x32e, &(0x7f0000000b00)="$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")
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000000c0)={{0x4, 0xac}, {0x4, 0xfffffffc}, 0x200001, 0x8})

34.556209235s ago: executing program 2 (id=873):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0)

34.486513468s ago: executing program 2 (id=875):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x40180, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xa, 0xb}, {0x7}, {0xffe0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)

34.037428392s ago: executing program 2 (id=879):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r1, r1, 0x0, 0x9)

34.029988472s ago: executing program 33 (id=879):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7)
sendfile(r1, r1, 0x0, 0x9)

6.385373278s ago: executing program 5 (id=1144):
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0xfe, 0x2ce, &(0x7f00000008c0)="$eJzs3UFrE1sUwPHTpq9JU9rkwePBe6AedKOb0MYPoEFaEANKbURdCFM70ZAxKTOhEhGTjbj1cxSX7gT1C3Qjbty7K4LgpgtxpDOTdtImTdqmSWr/Pyhz7px7uLdNWk4GZrpx9/WTYt5J5Y2KjMZURkXqsimS3IoCI8Fx1IvHJawulyZ/fDlz+979G5lsdm5BdT6zeDmtqtPn3j99/ub8x8rknbfT76Kynnyw8T39dX18/b+NX4uPC44WHC2VK2roUrlcMZYsU5cLTjGlessyDcfUQskx7aZ83iqvrFTVKC1PxVds03HUKFW1aFa1UtaKXVXjkVEoaSqV0qm4nG5jXczJrS0sGJm2aTfS0x3h2E20OmnbmXrrZG6tD3sCAABDZv/+3+/12/X/O93hQfr/fzv3/yLh/j8WLEL/3wP1plGH/h8nU615aNsZIx78/jaj/wcAAAAAAAAAAAAAAAAAAAAA4CTYdN2E67qJrWNwyhtHRSTm3wLujQe8TRyT8Ovvhr62X/9gvKvsyoC2ix4L3bgXE7FereZWc/7Rz2fyUhBLTJmRhPz03g8BP56/np2bUU9SPli1oL62motItFHfkGxVf/bvWb9em+v/knh4/bQk5J/W66db1o/LxQuh+pQk5NNDKYsly977eqf+xazqtZvZXfUT3jwAAAAAAP4EKd225/O7l/cmxGRv3q8PXR9wXbe23/WBXZ+vx+T/bh5RCQAAAAAAjsypPisalmXahwiiItJ5sjtyhCUOFriuSL/Wah9EZJCrtwuuisgQbKNfQUxE/DN6mPJv2+VdVbldzBkL/gPHcPx8OgeD/ssEAAAAoNd2mv4DFH1+eYw7AgAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9On2eWCN+XtSjcQ+5aHlIn3/BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAh8jsAAP//QNEWCQ==")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r3 = getpid()
r4 = socket(0x29, 0x5, 0x0)
ioctl$SIOCX25GFACILITIES(r4, 0x89e2, &(0x7f0000001540))
userfaultfd(0x1)
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
write$binfmt_script(r1, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, ']'}, {0x20, 'ext4\x00'}, {0x20, 'THAWED\x00'}, {}]}, 0x141cf74)
umount2(&(0x7f0000000040)='.\x00', 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)

5.949307172s ago: executing program 5 (id=1147):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bb", 0x6e}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

5.150785777s ago: executing program 3 (id=1151):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140), 0x1, 0x241, &(0x7f0000000840)="$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")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, 0x20000144, 0x0)

3.544601758s ago: executing program 3 (id=1157):
brk(0x7fffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_GET_IO_FLUSHER(0x4)
syz_clone(0x25000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)

3.523035799s ago: executing program 1 (id=1158):
r0 = getpgid(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r1], 0xfd, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2125099, 0x0)
r2 = syz_pidfd_open(r0, 0x0)
r3 = pidfd_getfd(r2, r2, 0x0)
setns(r3, 0x66020000)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='.\x00', 0x2)

3.522694809s ago: executing program 5 (id=1159):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e20, 0x7, @empty, 0xd}}, 0x0, 0x7ffe}, 0x90)

3.415151872s ago: executing program 1 (id=1160):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18)

3.16534183s ago: executing program 1 (id=1161):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
clock_nanosleep(0x8, 0x1, &(0x7f0000000080), 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r4, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0)

3.16482718s ago: executing program 6 (id=1162):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085000000430000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
getpid()
syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r1, r1, &(0x7f0000000000)=0x7, 0x4)

3.15249036s ago: executing program 0 (id=1163):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3.021435755s ago: executing program 0 (id=1164):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

3.021186355s ago: executing program 6 (id=1165):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_ACTIVATE(r3, 0x5606, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/244, 0xf4}], 0x1, 0x800, 0xfff)
socket(0x10, 0x2, 0x0)

2.888906379s ago: executing program 6 (id=1166):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x80002, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000280)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310300200000000000400800000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0)

2.431003163s ago: executing program 5 (id=1167):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
shutdown(r1, 0x1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket(0x10, 0x803, 0x0)

2.381234485s ago: executing program 3 (id=1168):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, 0x0, 0x0}, 0x20)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x7, 0x1, 0x3, "eee98fb006178749cb4dfd9300009b6b7bd152f35ed730fc700000cb4f1891e2", 0x32314752})

2.268640869s ago: executing program 5 (id=1169):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001600)='./file0\x00', 0x80c880, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x36a, &(0x7f00000006c0)="$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")
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)
r3 = socket$inet6_dccp(0xa, 0x6, 0x0)
setsockopt$inet6_int(r3, 0x10d, 0xb, &(0x7f0000000080)=0xa, 0x4)

1.936206929s ago: executing program 6 (id=1170):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000980)="91f8a9849519def28691bbc4173c3d6f357d0272b7e95a136b3ffec75b73e6937b7b22a1319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000f2ffffff2e3591ceb1757de97fb25500620d0d30506e7429fa5337b74945da657f794d5b5bf89588e07b14a17f069912dc0c3f201bff8b9a687b85baa11244632642a9be7b42b6b5882b738f05eba73221490e2d5c17cf406be2796eec488a5b5268f507ee8d6f3dd1d64abc785708eb9bd24e352a984b2b", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000880)="b527ce144a9e865255e6f85f4d18156225c3396c992b47cedd740a6a6c3c82aba6b56bd441a6dd0856d664fb959853821ce9917ed023550816ba4b21413e5e7c41c7e2197da810d26109c4572ec3dfb28073599772cf3e04b596b22fce7db25609f21c6da4db35a48c20cdfa45bb", 0x6e}], 0x1}}], 0x2, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

1.857270322s ago: executing program 1 (id=1171):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
capset(0x0, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x9})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000000), &(0x7f00000001c0)=ANY=[], 0xfe37, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)

1.827247372s ago: executing program 0 (id=1172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0xa, 0xfff1}}}, 0x24}}, 0x40004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4)

1.476691883s ago: executing program 3 (id=1173):
socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246)
writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1)

1.393378996s ago: executing program 3 (id=1174):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
fcntl$setstatus(r4, 0x4, 0x40800)
bind$can_j1939(r4, 0x0, 0x0)
connect$can_j1939(r4, 0x0, 0x0)
sendfile(r4, r3, 0x0, 0x1000000000000a)

1.340080367s ago: executing program 0 (id=1175):
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000480)='net/fib_triestat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x2, 0x3000, 0x1, &(0x7f0000418000/0x3000)=nil)
pread64(r0, &(0x7f000004b680)=""/102363, 0x18fdb, 0x2)

942.71776ms ago: executing program 1 (id=1176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xb, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xfffd, 0x17, 0x9, 0x4, 0x8}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000)

934.65265ms ago: executing program 6 (id=1177):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_setup(0x9, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0xf0f003, 0x1})

441.302486ms ago: executing program 3 (id=1178):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "a51b69ae9597407dc5518eada89d"}}]}, 0x30}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)

440.562726ms ago: executing program 1 (id=1179):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

440.244886ms ago: executing program 0 (id=1180):
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]})
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
dup3(r3, r2, 0x80000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

383.097048ms ago: executing program 5 (id=1181):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
listen(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/dev_mcast\x00')
read$FUSE(r3, &(0x7f00000099c0)={0x2020}, 0x2020)

1.01548ms ago: executing program 0 (id=1182):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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")
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f00000014c0)=0x2)

0s ago: executing program 6 (id=1183):
r0 = userfaultfd(0x80801)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="12d03715a316", 'vxcan1\x00'}}, 0x1e)
mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

s ready
[   31.036343][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   31.045910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   31.047210][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   31.056651][ T4326] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.065984][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   31.067419][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   31.074111][ T4334] device veth0_vlan entered promiscuous mode
[   31.077118][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.078587][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.080159][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.082049][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.084377][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.092387][ T4334] device veth1_vlan entered promiscuous mode
[   31.099173][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   31.100739][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.102375][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.122441][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   31.124319][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.126013][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.127564][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.129083][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.140007][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.141500][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.148004][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   31.149349][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   31.151505][ T4326] device veth0_vlan entered promiscuous mode
[   31.154201][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.155869][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.161418][ T4334] device veth0_macvtap entered promiscuous mode
[   31.164443][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   31.165975][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.167490][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.170992][ T4334] device veth1_macvtap entered promiscuous mode
[   31.175911][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.177332][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.178674][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.182257][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0
[   31.185944][ T4331] device veth0_vlan entered promiscuous mode
[   31.189656][ T4326] device veth1_vlan entered promiscuous mode
[   31.196639][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.200138][ T4331] device veth1_vlan entered promiscuous mode
[   31.206068][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   31.207640][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   31.209085][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   31.210554][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   31.212141][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.215115][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.220892][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.225557][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.227231][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.228966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.230543][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.237857][ T4334] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.239286][ T4334] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.240788][ T4334] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.242266][ T4334] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.247887][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   31.249458][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.259679][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.261258][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.263846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   31.265366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.266960][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.268293][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.269807][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   31.271193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   31.274334][ T4338] device veth0_vlan entered promiscuous mode
[   31.278121][ T4338] device veth1_vlan entered promiscuous mode
[   31.280559][ T4327] device veth0_vlan entered promiscuous mode
[   31.286820][ T4331] device veth0_macvtap entered promiscuous mode
[   31.288256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   31.289731][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.291172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.292967][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   31.297191][ T4326] device veth0_macvtap entered promiscuous mode
[   31.301458][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   31.303460][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.305003][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.307275][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   31.309540][ T4331] device veth1_macvtap entered promiscuous mode
[   31.311574][ T4327] device veth1_vlan entered promiscuous mode
[   31.316819][ T4326] device veth1_macvtap entered promiscuous mode
[   31.346066][ T4338] device veth0_macvtap entered promiscuous mode
[   31.347980][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   31.349451][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   31.350923][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.352373][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.355127][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.356787][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.358413][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   31.359971][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.362362][ T4327] device veth0_macvtap entered promiscuous mode
[   31.365280][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.366933][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.369213][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.378992][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   31.380468][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   31.381905][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.383963][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.387208][ T4327] device veth1_macvtap entered promiscuous mode
[   31.389874][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.391660][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.395948][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.397631][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.399857][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.401398][ T4338] device veth1_macvtap entered promiscuous mode
[   31.404298][ T4326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.405957][ T4326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.408098][ T4326] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.409713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.410004][  T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.411154][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   31.412285][  T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.417490][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.419021][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.420895][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.422449][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.424754][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.430475][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.432168][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.436537][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.438216][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.439979][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.441713][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.444450][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.446522][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.448227][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.449949][ T4327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.451718][ T4327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.455975][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.457696][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.459476][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.461211][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.463431][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.465084][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.466898][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.468949][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.470925][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.472645][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.474273][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.476012][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.477601][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.479197][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.481747][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.483477][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.484880][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.486500][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.492029][ T4326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.494078][ T4326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.495501][ T4326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.497043][ T4326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.499900][ T4327] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.501430][ T4327] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.504656][ T4327] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.506176][ T4327] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.521249][  T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.522891][  T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.526989][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.541100][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.544837][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.546475][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.548355][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.550116][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.551895][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.554674][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   31.556289][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.558555][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0
[   31.559839][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   31.561491][  T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.599061][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.600870][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.603865][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.605561][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.607247][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.608827][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.610344][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   31.612194][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   31.616505][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1
[   31.620105][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   31.621823][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   31.634023][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   31.635564][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   31.637092][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   31.638657][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   31.670273][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.671606][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.675373][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.681457][  T231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.683022][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.684287][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.687945][  T231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.690708][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.708975][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.710528][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.711876][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.717630][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.732131][  T231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.732388][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.733546][  T231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.734940][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.736925][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.738936][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.755372][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.756894][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.758381][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   31.784093][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   31.785473][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   31.787079][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   31.854556][ T4413] binder: 4412:4413 tried to acquire reference to desc 0, got 1 instead
[   31.865715][ T4413] binder: 4412:4413 got transaction with invalid parent offset or type
[   31.872737][ T4413] binder: 4413:4412 failed to fixup parent
[   31.873882][ T4413] binder: 4412:4413 transaction call to 4412:0 failed 12/29201/-22, size 104-24 line 3540
[   31.895194][    T9] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[   31.915413][ T4377] binder: release 4412:4413 transaction 5 out, still active
[   31.918525][ T4377] binder: undelivered TRANSACTION_COMPLETE
[   31.919751][ T4377] binder: undelivered TRANSACTION_ERROR: 29201
[   31.920775][ T4377] binder: send failed reply for transaction 5, target dead
[   32.023302][ T4431] tipc: Started in network mode
[   32.024144][ T4431] tipc: Node identity aee73785e41f, cluster identity 4711
[   32.025340][ T4431] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   32.027228][ T4431] device syzkaller0 entered promiscuous mode
[   32.572769][ T4335] Bluetooth: hci3: command 0x041b tx timeout
[   32.574162][ T4328] Bluetooth: hci1: command 0x041b tx timeout
[   32.575444][ T4330] Bluetooth: hci4: command 0x041b tx timeout
[   32.575491][ T4343] Bluetooth: hci0: command 0x041b tx timeout
[   32.578126][ T4340] Bluetooth: hci2: command 0x041b tx timeout
[   32.911180][ T4431] tipc: Resetting bearer <eth:syzkaller0>
[   33.221607][ T4430] tipc: Resetting bearer <eth:syzkaller0>
[   33.388222][ T4462] loop4: detected capacity change from 0 to 16
[   33.390195][ T4462] =======================================================
[   33.390195][ T4462] WARNING: The mand mount option has been deprecated and
[   33.390195][ T4462]          and is ignored by this kernel. Remove the mand
[   33.390195][ T4462]          option from the mount to silence this warning.
[   33.390195][ T4462] =======================================================
[   33.407043][ T4462] erofs: (device loop4): mounted with root inode @ nid 36.
[   34.584572][ T4430] tipc: Disabling bearer <eth:syzkaller0>
[   34.593366][ T4373] tipc: Node number set to 1257781125
[   34.652792][ T4330] Bluetooth: hci4: command 0x040f tx timeout
[   34.654215][ T4330] Bluetooth: hci0: command 0x040f tx timeout
[   34.655302][ T4330] Bluetooth: hci3: command 0x040f tx timeout
[   34.656364][ T4330] Bluetooth: hci1: command 0x040f tx timeout
[   34.657511][ T4330] Bluetooth: hci2: command 0x040f tx timeout
[   36.501813][ T4495] loop3: detected capacity change from 0 to 40427
[   36.521746][ T4495] F2FS-fs (loop3): invalid crc value
[   36.529345][ T4495] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   36.567197][ T4495] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0
[   36.610051][ T4531] loop0: detected capacity change from 0 to 128
[   36.745023][ T4330] Bluetooth: hci1: command 0x0419 tx timeout
[   36.745633][ T4341] Bluetooth: hci2: command 0x0419 tx timeout
[   36.750892][ T4328] Bluetooth: hci4: command 0x0419 tx timeout
[   36.751945][ T4343] Bluetooth: hci3: command 0x0419 tx timeout
[   36.755039][ T4335] Bluetooth: hci0: command 0x0419 tx timeout
[   36.789126][ T4495] F2FS-fs (loop3): Start checkpoint disabled!
[   36.825381][ T4495] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   37.596441][ T4539] device syzkaller0 entered promiscuous mode
[   37.962508][    C1] sched: RT throttling activated
[   38.044001][ T4545] tipc: Started in network mode
[   38.044885][ T4545] tipc: Node identity f299f551028a, cluster identity 4711
[   38.048919][ T4545] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   38.758872][ T4535] tipc: Resetting bearer <eth:syzkaller0>
[   39.276304][ T4535] tipc: Disabling bearer <eth:syzkaller0>
[   39.292087][ T4376] tipc: Node number set to 4027839825
[   40.220014][ T4595] netlink: 'syz.0.32': attribute type 1 has an invalid length.
[   41.553781][ T4648] loop1: detected capacity change from 0 to 512
[   41.679332][ T4648] FAT-fs (loop1): FAT read failed (blocknr 128)
[   43.644623][   T27] audit: type=1326 audit(43.630:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4655 comm="syz.3.47" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff99d77a28 code=0x0
[   43.771433][ T4665] device syzkaller0 entered promiscuous mode
[   43.879628][ T4670] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[   44.481834][ T4665] loop4: detected capacity change from 0 to 128
[   44.552803][ T4665] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   44.560420][ T4665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   45.501128][ T4699] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET)
[   45.507098][ T4341] Bluetooth: hci0: Unknown advertising packet type: 0x18
[   45.507123][ T4341] Bluetooth: hci0: Unknown advertising packet type: 0x1e
[   45.508748][ T4341] Bluetooth: hci0: Unknown advertising packet type: 0x30
[   45.510544][ T4341] Bluetooth: hci0: Malformed LE Event: 0x0d
[   45.997339][ T4710] loop4: detected capacity change from 0 to 32768
[   46.007353][ T4711] netlink: 'syz.3.60': attribute type 8 has an invalid length.
[   46.136188][ T4710] XFS (loop4): Mounting V5 Filesystem
[   46.204332][ T4710] XFS (loop4): Ending clean mount
[   46.209399][ T4710] XFS (loop4): Quotacheck needed: Please wait.
[   46.416552][ T4710] XFS (loop4): Quotacheck: Done.
[   47.106098][ T4338] XFS (loop4): Unmounting Filesystem
[   48.736475][ T4756] binder: 4755:4756 tried to acquire reference to desc 0, got 1 instead
[   48.821852][ T4761] loop1: detected capacity change from 0 to 2048
[   48.841225][ T4763] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   48.863529][ T4761] Bluetooth: MGMT ver 1.22
[   50.389321][ T4510] binder: release 4755:4756 transaction 17 out, still active
[   50.390702][ T4510] binder: undelivered TRANSACTION_COMPLETE
[   50.486451][ T4510] binder: send failed reply for transaction 24 to 4755:4760
[   50.487765][ T4510] binder: undelivered TRANSACTION_COMPLETE
[   50.488664][ T4510] binder: undelivered TRANSACTION_ERROR: 29189
[   50.489894][ T4510] binder: send failed reply for transaction 17, target dead
[   50.582074][ T4783] loop4: detected capacity change from 0 to 32768
[   50.620321][ T4783] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.78 (4783)
[   50.626686][ T4783] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   50.628541][ T4783] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   50.630044][ T4783] BTRFS info (device loop4): force clearing of disk cache
[   50.631160][ T4783] BTRFS info (device loop4): turning off barriers
[   50.632103][ T4783] BTRFS info (device loop4): use no compression
[   50.633163][ T4783] BTRFS info (device loop4): disabling free space tree
[   50.634361][ T4783] BTRFS info (device loop4): enabling ssd optimizations
[   50.635521][ T4783] BTRFS info (device loop4): using spread ssd allocation scheme
[   50.636849][ T4783] BTRFS info (device loop4): not using ssd optimizations
[   50.638036][ T4783] BTRFS info (device loop4): not using spread ssd allocation scheme
[   50.871908][ T4804] loop1: detected capacity change from 0 to 512
[   50.936268][ T4804] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   50.938520][ T4804] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   51.196080][ T4804] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   51.201284][ T4804] EXT4-fs (loop1): 1 truncate cleaned up
[   51.202246][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   52.182916][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   52.209363][ T4783] BTRFS info (device loop4): rebuilding free space tree
[   52.217449][ T4783] BTRFS info (device loop4): disabling free space tree
[   52.218634][ T4783] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   52.220382][ T4783] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   52.225797][ T4783] BTRFS info (device loop4): checking UUID tree
[   52.830583][ T4828] loop1: detected capacity change from 0 to 512
[   53.124758][ T4828] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.84: inode has both inline data and extents flags
[   53.127745][ T4828] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.84: couldn't read orphan inode 15 (err -117)
[   53.129646][ T4828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   53.304536][ T4826] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[   53.305772][ T4826] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   53.307577][ T4826] vhci_hcd vhci_hcd.0: Device attached
[   53.336187][ T4338] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   54.038495][ T4829] vhci_hcd: connection closed
[   54.048210][   T11] vhci_hcd: stop threads
[   54.054995][   T11] vhci_hcd: release socket
[   54.103557][   T11] vhci_hcd: disconnect device
[   54.709434][ T4326] EXT4-fs (loop1): unmounting filesystem.
[   54.742975][ T4315] vhci_hcd: vhci_device speed not set
[   55.831980][ T4875] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[   56.024248][   T27] audit: type=1326 audit(55.980:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.050533][   T27] audit: type=1326 audit(55.990:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.082574][   T27] audit: type=1326 audit(55.990:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.092775][   T27] audit: type=1326 audit(55.990:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.102229][   T27] audit: type=1326 audit(55.990:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.110622][   T27] audit: type=1326 audit(55.990:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.128200][   T27] audit: type=1326 audit(55.990:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.138499][   T27] audit: type=1326 audit(55.990:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.149993][   T27] audit: type=1326 audit(55.990:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   56.160408][   T27] audit: type=1326 audit(56.000:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4870 comm="syz.4.90" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff95f77a28 code=0x7ffc0000
[   58.830549][ T4922] random: crng reseeded on system resumption
[   59.156223][ T4924] loop0: detected capacity change from 0 to 1024
[   59.745315][ T4341] Bluetooth: hci4: command 0x0407 tx timeout
[   60.547751][ T4955] loop0: detected capacity change from 0 to 4096
[   61.009222][ T4955] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[   61.727843][ T4962] capability: warning: `syz.1.111' uses 32-bit capabilities (legacy support in use)
[   61.995437][ T4948] ntfs3: loop0: failed to convert "c46c" to koi8-r
[   63.920706][ T4995] netlink: 'syz.1.121': attribute type 8 has an invalid length.
[   64.427141][ T4986] loop0: detected capacity change from 0 to 32768
[   64.445878][ T4986] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.120 (4986)
[   65.302856][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[   65.304115][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[   65.699682][ T4986] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   65.701598][ T4986] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[   65.709964][ T4986] BTRFS info (device loop0): setting nodatasum
[   65.710884][ T4986] BTRFS info (device loop0): using free space tree
[   66.540820][ T4986] BTRFS error (device loop0): open_ctree failed: -12
[   66.725281][ T5063] random: crng reseeded on system resumption
[   69.219852][ T5099] loop4: detected capacity change from 0 to 1024
[   69.915034][    T7] cfg80211: failed to load regulatory.db
[   70.004539][ T5114] netlink: 16 bytes leftover after parsing attributes in process `syz.1.143'.
[   70.653107][ T5112] Set syz1 is full, maxelem 65536 reached
[   71.531972][ T5128] syz.2.146 sent an empty control message without MSG_MORE.
[   73.197500][ T5151] loop4: detected capacity change from 0 to 512
[   74.599181][ T5149] FAT-fs (loop4): FAT read failed (blocknr 128)
[   75.715496][ T5158] loop2: detected capacity change from 0 to 512
[   75.742613][ T5158] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   75.778503][ T5158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   75.780166][ T5158] System zones: 1-12
[   75.795909][ T5158] EXT4-fs (loop2): 1 truncate cleaned up
[   75.800292][ T5158] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   75.925735][ T4334] EXT4-fs (loop2): unmounting filesystem.
[   76.896714][ T5188] loop4: detected capacity change from 0 to 256
[   76.898220][ T5188] exfat: Deprecated parameter 'utf8'
[   76.899167][ T5188] exfat: Deprecated parameter 'namecase'
[   76.900171][ T5188] exfat: Deprecated parameter 'namecase'
[   76.901147][ T5188] exfat: Deprecated parameter 'utf8'
[   76.994298][ T5188] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   80.625970][ T5229] loop2: detected capacity change from 0 to 128
[   81.013280][ T5229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   81.154288][ T5225] netlink: 27 bytes leftover after parsing attributes in process `syz.3.170'.
[   81.220843][ T5235] syz.2.169 (pid 5235) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   81.626828][ T5245] loop0: detected capacity change from 0 to 16
[   81.682357][ T5245] erofs: (device loop0): mounted with root inode @ nid 36.
[   83.011846][ T4334] EXT4-fs (loop2): unmounting filesystem.
[   83.120290][ T5254] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   84.276248][ T5269] ceph: No mds server is up or the cluster is laggy
[   84.278694][ T4848] libceph: connect (1)[c::]:6789 error -101
[   84.282407][ T4848] libceph: mon0 (1)[c::]:6789 connect error
[   88.812395][ T5337] loop4: detected capacity change from 0 to 32768
[   89.080572][ T5337] XFS (loop4): Mounting V5 Filesystem
[   89.153932][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'.
[   89.155718][ T5349] bond0: option lp_interval: invalid value (0)
[   89.156920][ T5349] bond0: option lp_interval: allowed values 1 - 2147483647
[   89.181869][ T5337] XFS (loop4): Ending clean mount
[   89.184685][ T5337] XFS (loop4): Quotacheck needed: Please wait.
[   89.319269][ T5337] XFS (loop4): Quotacheck: Done.
[   89.524730][ T5357] loop0: detected capacity change from 0 to 512
[   89.526571][ T5357] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   89.616827][ T5357] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   89.618449][ T5357] System zones: 1-12
[   90.025255][ T4338] XFS (loop4): Unmounting Filesystem
[   90.028781][ T5357] EXT4-fs (loop0): 1 truncate cleaned up
[   90.034781][ T5357] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   90.381223][ T5372] atomic_op 0000000083d395d2 conn xmit_atomic 0000000000000000
[   91.878519][ T5396] x_tables: duplicate underflow at hook 1
[   93.345025][ T4331] EXT4-fs (loop0): unmounting filesystem.
[   93.594688][ T5418] loop2: detected capacity change from 0 to 32768
[   93.779826][ T5418] XFS (loop2): Mounting V5 Filesystem
[   94.338651][ T5418] XFS (loop2): Ending clean mount
[   94.340544][ T5418] XFS (loop2): Quotacheck needed: Please wait.
[   94.351503][ T5418] XFS (loop2): Quotacheck: Done.
[   94.380035][ T5433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'.
[   94.842193][ T5444] loop0: detected capacity change from 0 to 8192
[   94.848272][ T5444] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   94.850634][ T5444] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[   94.852230][ T5444] REISERFS (device loop0): using ordered data mode
[   94.853784][ T5444] reiserfs: using flush barriers
[   94.855294][ T5444] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   94.858699][ T5444] REISERFS (device loop0): checking transaction log (loop0)
[   94.900219][ T4334] XFS (loop2): Unmounting Filesystem
[   94.927769][ T5444] REISERFS (device loop0): Using tea hash to sort names
[   94.932129][ T5444] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[   95.008589][ T5444] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2)
[   95.054847][ T5450] device syzkaller0 entered promiscuous mode
[   95.110678][ T5450] tipc: Started in network mode
[   95.111740][ T5450] tipc: Node identity 4aee9a101b62, cluster identity 4711
[   95.114262][ T5450] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   95.116794][ T5449] tipc: Resetting bearer <eth:syzkaller0>
[   95.231955][ T5454] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 4)
[   96.216429][ T5449] tipc: Disabling bearer <eth:syzkaller0>
[   96.231520][    T7] tipc: Node number set to 1368168976
[   96.992918][ T5486] loop2: detected capacity change from 0 to 256
[   96.995015][ T5486] exfat: Deprecated parameter 'utf8'
[   96.996006][ T5486] exfat: Deprecated parameter 'namecase'
[   96.997109][ T5486] exfat: Deprecated parameter 'namecase'
[   96.998108][ T5486] exfat: Deprecated parameter 'utf8'
[   97.053618][ T5486] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   97.626485][ T5495] netlink: 'syz.1.226': attribute type 10 has an invalid length.
[   97.627960][ T5495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.226'.
[   97.630209][ T5495] device team0 entered promiscuous mode
[   97.631100][ T5495] device team_slave_0 entered promiscuous mode
[   97.633204][ T5495] device team_slave_1 entered promiscuous mode
[   97.637738][ T5495] bridge0: port 3(team0) entered blocking state
[   97.638955][ T5495] bridge0: port 3(team0) entered disabled state
[   97.646667][ T5495] bridge0: port 3(team0) entered blocking state
[   97.647954][ T5495] bridge0: port 3(team0) entered forwarding state
[   97.817690][ T5498] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   97.831374][ T5498] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   99.097104][ T5506] loop4: detected capacity change from 0 to 164
[   99.110064][ T5506] isofs_fill_super: bread failed, dev=loop4, iso_blknum=41, block=82
[   99.249880][ T5514] loop4: detected capacity change from 0 to 512
[   99.280090][ T5484] loop0: detected capacity change from 0 to 32768
[   99.331225][ T5514] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[   99.339472][ T5514] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[   99.341881][ T5514] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[   99.345119][ T5511] loop2: detected capacity change from 0 to 32768
[   99.351853][ T5511] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.235 (5511)
[   99.356559][ T5514] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[   99.357680][ T5516] ceph: No mds server is up or the cluster is laggy
[   99.359787][    T7] libceph: connect (1)[c::]:6789 error -101
[   99.360926][    T7] libceph: mon0 (1)[c::]:6789 connect error
[   99.365000][ T5511] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   99.371874][ T5511] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   99.373620][ T5511] BTRFS warning (device loop2): the 'inode_cache' option is deprecated and has no effect since 5.11
[   99.376059][ T5511] BTRFS error (device loop2): support for check_integrity* not compiled in!
[   99.639014][ T5511] BTRFS error (device loop2): open_ctree failed: -22
[   99.639399][ T5048] libceph: connect (1)[c::]:6789 error -101
[   99.641288][ T5048] libceph: mon0 (1)[c::]:6789 connect error
[   99.676956][ T5484] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   99.789943][ T5531] loop4: detected capacity change from 0 to 512
[   99.794819][ T5531] EXT4-fs (loop4): orphan cleanup on readonly fs
[   99.798101][ T5531] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.238: EA inode hash validation failed
[   99.800283][ T5531] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   99.800879][ T4320] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (4320)
[   99.802876][ T5531] EXT4-fs (loop4): 1 orphan inode deleted
[   99.805524][ T5531] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  100.167386][ T4331] ocfs2: Unmounting device (7,0) on (node local)
[  101.380456][ T5562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.248'.
[  101.987027][ T5571] loop0: detected capacity change from 0 to 256
[  103.581301][ T5571] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d)
[  103.590120][ T5571] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 1)
[  103.601007][ T5571] exFAT-fs (loop0): failed to load alloc-bitmap
[  103.864296][ T5571] exFAT-fs (loop0): failed to recognize exfat type
[  103.990806][ T5585] loop2: detected capacity change from 0 to 1024
[  104.067133][ T5583] loop0: detected capacity change from 0 to 512
[  104.074958][ T5583] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  104.093177][ T5583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  104.094526][ T5583] System zones: 1-12
[  104.096992][ T4316] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  104.116716][ T5583] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  104.216962][ T5583] EXT4-fs (loop0): 1 truncate cleaned up
[  104.218317][ T5583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  105.173364][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  105.216948][ T5608] loop0: detected capacity change from 0 to 1024
[  105.220207][ T5608] EXT4-fs: Ignoring removed orlov option
[  105.423526][ T5608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  108.355772][ T5630] loop2: detected capacity change from 0 to 256
[  108.357352][ T5630] exfat: Unknown parameter 'ÿÿÿÿÿÿ'
[  108.806858][ T4318] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.821179][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  108.877314][ T5638] loop0: detected capacity change from 0 to 128
[  108.918320][ T5638] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  108.954993][ T5638] hpfs: filesystem error: improperly stopped
[  108.956007][ T5638] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  108.964728][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[  109.055461][ T5645] loop0: detected capacity change from 0 to 1024
[  109.084988][ T5645] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  109.086730][ T5645] EXT4-fs (loop0): orphan cleanup on readonly fs
[  109.090232][ T5645] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.274: Invalid inode table block 0 in block_group 0
[  109.105679][ T5645] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  109.107513][ T5645] EXT4-fs error (device loop0): ext4_quota_write:7253: inode #3: comm syz.0.274: mark_inode_dirty error
[  109.113693][ T5645] __quota_error: 357 callbacks suppressed
[  109.113706][ T5645] Quota error (device loop0): write_blk: dquota write failed
[  109.115859][ T5645] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  109.123160][ T5645] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.274: Failed to acquire dquot type 0
[  109.130955][ T5645] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.274: Invalid inode table block 0 in block_group 0
[  109.140400][ T5645] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  109.146305][ T5645] EXT4-fs error (device loop0): ext4_ext_truncate:4460: inode #15: comm syz.0.274: mark_inode_dirty error
[  109.154754][ T5645] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.274: Invalid inode table block 0 in block_group 0
[  109.166485][ T5645] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  109.174465][ T5645] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  109.181197][ T5645] EXT4-fs error (device loop0): __ext4_get_inode_loc:4520: comm syz.0.274: Invalid inode table block 0 in block_group 0
[  109.191231][ T5645] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5952: Corrupt filesystem
[  109.194354][ T5645] EXT4-fs error (device loop0): ext4_truncate:4325: inode #15: comm syz.0.274: mark_inode_dirty error
[  109.196261][ T5645] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  109.198031][ T5645] EXT4-fs (loop0): 1 truncate cleaned up
[  109.199247][ T5645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  109.225666][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  109.266978][ T5641] loop2: detected capacity change from 0 to 32768
[  109.272486][ T5650] loop0: detected capacity change from 0 to 8
[  109.300605][ T5641] (syz.2.272,5641,1):ocfs2_verify_userspace_stack:854 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  109.304160][ T5650] SQUASHFS error: lzo decompression failed, data probably corrupt
[  109.310817][ T5641] (syz.2.272,5641,1):ocfs2_fill_super:1176 ERROR: status = -22
[  109.313534][ T5650] SQUASHFS error: Failed to read block 0x91: -5
[  109.315771][ T5650] SQUASHFS error: Unable to read metadata cache entry [8f]
[  109.318939][ T5650] SQUASHFS error: Unable to read inode 0x11f
[  109.399679][ T5655] loop0: detected capacity change from 0 to 128
[  109.405906][ T5655] befs: Invalid gid -1, using default
[  109.408311][ T5655] befs: (loop0): No write support. Marking filesystem read-only
[  109.417229][ T5655] befs: (loop0): invalid magic header
[  109.472173][ T4316] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.947328][ T5663] loop0: detected capacity change from 0 to 4096
[  109.987772][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  110.006187][ T5663] ntfs3: loop0: Failed to load $Volume.
[  110.031118][ T5668] loop2: detected capacity change from 0 to 4096
[  110.109549][ T5668] ntfs: volume version 3.1.
[  110.544409][ T5674] loop4: detected capacity change from 0 to 256
[  110.545971][ T5674] exfat: Unknown parameter 'ÿÿÿÿÿÿ'
[  111.684111][ T4330] Bluetooth: hci3: command 0x0406 tx timeout
[  111.791965][ T4318] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  111.878480][ T5677] loop4: detected capacity change from 0 to 512
[  112.012646][ T4341] Bluetooth: hci0: command 0x0406 tx timeout
[  113.108564][ T5699] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  113.136736][ T5699] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  113.143786][ T5701] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  113.146987][ T5701] NILFS (loop4): unsupported revision (superblock rev.=0.0, current rev.=2.0). Please check the version of mkfs.nilfs(2).
[  113.149928][ T5699] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.292: bg 0: block 248: padding at end of block bitmap is not set
[  113.158417][ T5697] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  113.176165][ T5699] Quota error (device loop2): write_blk: dquota write failed
[  113.180885][ T5697] ntfs: (device loop0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  113.186321][ T5699] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  113.189309][ T5697] ntfs: (device loop0): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  113.191821][ T5699] EXT4-fs error (device loop2): ext4_acquire_dquot:6841: comm syz.2.292: Failed to acquire dquot type 1
[  113.201993][ T5697] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  113.206549][ T5699] EXT4-fs (loop2): 1 truncate cleaned up
[  113.207713][ T5699] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  113.211519][ T5697] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  113.226718][ T5697] ntfs: (device loop0): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  113.234740][ T5697] ntfs: volume version 3.1.
[  113.242305][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  113.276929][ T5707] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  113.284241][ T5707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  113.285738][ T5707] System zones: 1-12
[  113.289298][ T5707] EXT4-fs (loop4): 1 truncate cleaned up
[  113.292487][ T5707] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  113.949224][ T5718] IPv6: addrconf: prefix option has invalid lifetime
[  114.001853][ T5720] set_capacity_and_notify: 4 callbacks suppressed
[  114.001860][ T5720] loop0: detected capacity change from 0 to 2048
[  114.013802][ T5720] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  114.131197][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  114.156256][ T5725] loop0: detected capacity change from 0 to 512
[  114.166567][ T5725] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  114.692848][ T5725] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  114.694296][ T5725] System zones: 1-12
[  114.702368][ T5725] EXT4-fs (loop0): 1 truncate cleaned up
[  114.703525][ T5725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  115.276351][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  115.408338][ T5745] loop4: detected capacity change from 0 to 8192
[  115.467302][ T5745]  loop4: p1 p2 p3
[  115.468124][ T5745] loop4: partition table partially beyond EOD, truncated
[  115.472359][ T5745] loop4: p1 start 51379968 is beyond EOD, truncated
[  115.931898][ T5753] loop2: detected capacity change from 0 to 1024
[  115.984223][ T5745] loop4: p3 size 100663552 extends beyond EOD, truncated
[  116.243324][ T5753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  116.353530][ T5739] loop0: detected capacity change from 0 to 65536
[  116.422022][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  116.446479][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  116.456585][ T4320] udevd[4320]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  116.500742][ T5739] XFS (loop0): Mounting V5 Filesystem
[  116.598243][ T5789] loop2: detected capacity change from 0 to 256
[  116.650576][ T5792] loop4: detected capacity change from 0 to 1024
[  116.651989][ T5789] FAT-fs (loop2): Directory bread(block 64) failed
[  116.656659][ T5789] FAT-fs (loop2): Directory bread(block 65) failed
[  116.662190][ T5789] FAT-fs (loop2): Directory bread(block 66) failed
[  116.671454][ T5789] FAT-fs (loop2): Directory bread(block 67) failed
[  116.677035][ T5789] FAT-fs (loop2): Directory bread(block 68) failed
[  116.678268][ T5789] FAT-fs (loop2): Directory bread(block 69) failed
[  116.687306][ T5792] hfsplus: can't free extent
[  116.688603][ T5739] XFS (loop0): Ending clean mount
[  116.690008][ T5739] XFS (loop0): Quotacheck needed: Please wait.
[  116.705731][ T5789] FAT-fs (loop2): Directory bread(block 70) failed
[  116.708770][ T5739] XFS (loop0): Quotacheck: Done.
[  116.712000][ T5789] FAT-fs (loop2): Directory bread(block 71) failed
[  116.730821][ T5789] FAT-fs (loop2): Directory bread(block 72) failed
[  116.731948][ T5789] FAT-fs (loop2): Directory bread(block 73) failed
[  116.770516][ T4331] XFS (loop0): Unmounting Filesystem
[  116.819052][ T5802] loop4: detected capacity change from 0 to 64
[  116.876739][ T5802] Trying to free block not in datazone
[  117.064841][ T5812] siw: device registration error -23
[  118.150679][ T5813] loop4: detected capacity change from 0 to 1024
[  118.977926][ T5814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.344'.
[  119.050667][ T5813] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  119.153157][ T5830] loop2: detected capacity change from 0 to 1024
[  119.215525][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  119.257823][ T5841] loop4: detected capacity change from 0 to 764
[  119.269453][ T5844] loop0: detected capacity change from 0 to 512
[  119.298724][ T5844] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  119.349441][ T5841] Symlink component flag not implemented
[  119.350495][ T5841] Symlink component flag not implemented
[  119.351583][ T5841] Symlink component flag not implemented (128)
[  119.352882][ T5841] Symlink component flag not implemented (122)
[  119.355008][ T5844] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  119.356348][ T5844] System zones: 1-12
[  119.367405][ T5844] EXT4-fs (loop0): 1 truncate cleaned up
[  119.368494][ T5844] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  119.679629][ T5855] netlink: 'syz.2.351': attribute type 3 has an invalid length.
[  119.730057][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  119.730067][   T27] audit: type=1326 audit(119.710:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.2.353" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe377a28 code=0x7ffc0000
[  119.736600][   T27] audit: type=1326 audit(119.710:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.2.353" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=116 compat=0 ip=0xffffbe377a28 code=0x7ffc0000
[  119.746695][   T27] audit: type=1326 audit(119.720:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5861 comm="syz.2.353" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbe377a28 code=0x7ffc0000
[  119.775498][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'.
[  119.959531][ T5859] loop4: detected capacity change from 0 to 32768
[  119.989490][ T5859] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  120.032268][ T4338] ocfs2: Unmounting device (7,4) on (node local)
[  120.052335][ T5892] loop2: detected capacity change from 0 to 512
[  120.056502][ T5892] EXT4-fs: Ignoring removed oldalloc option
[  120.058040][ T5892] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.066156][ T5894] netlink: 'syz.4.367': attribute type 11 has an invalid length.
[  120.068771][ T5894] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.367'.
[  120.079750][ T5892] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  120.109017][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  120.110472][ T5892] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002]
[  120.118352][ T5892] EXT4-fs (loop2): orphan cleanup on readonly fs
[  120.119464][ T5892] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  120.139776][ T5892] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  120.142246][ T5892] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  120.158498][ T5892] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.368: bg 0: block 40: padding at end of block bitmap is not set
[  120.185307][ T5892] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6180: Corrupt filesystem
[  120.199290][ T5892] EXT4-fs (loop2): 1 truncate cleaned up
[  120.200303][ T5892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  120.239339][ T5892] EXT4-fs error (device loop2): ext4_encrypted_get_link:46: inode #16: comm syz.2.368: bad symlink.
[  120.286290][ T5905] loop0: detected capacity change from 0 to 4096
[  120.294138][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  120.297531][ T5905] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  120.326442][ T5905] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  120.333264][ T5905] ntfs3: loop0: Failed to load $Extend.
[  120.342317][ T5901] loop4: detected capacity change from 0 to 32768
[  120.361059][ T5901] jfs_mount: Mount Failure: File System Dirty.
[  120.362345][ T5901] Mount JFS Failure: -22
[  120.363822][ T5901] jfs_mount failed w/return code = -22
[  120.547570][ T5911] loop2: detected capacity change from 0 to 32768
[  120.549590][ T5911] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.374 (5911)
[  120.584732][ T5911] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  120.586616][ T5911] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  120.588155][ T5911] BTRFS info (device loop2): enabling disk space caching
[  120.589295][ T5911] BTRFS info (device loop2): force clearing of disk cache
[  120.590464][ T5911] BTRFS info (device loop2): disk space caching is enabled
[  121.028269][ T5911] BTRFS info (device loop2): enabling ssd optimizations
[  121.030373][ T5911] BTRFS info (device loop2): rebuilding free space tree
[  121.039430][ T5911] BTRFS info (device loop2): disabling free space tree
[  121.040924][ T5911] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  121.044976][ T5911] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  121.065300][ T4334] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  121.468746][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.4.392'.
[  121.472287][ T5970] loop2: detected capacity change from 0 to 8
[  121.481194][ T5970] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  121.496936][ T5970] cramfs: wrong endianness
[  121.905671][ T5990] loop4: detected capacity change from 0 to 512
[  121.913669][ T5990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  121.918780][ T5990] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  121.920258][ T5990] System zones: 1-12
[  121.929064][ T5990] EXT4-fs (loop4): 1 truncate cleaned up
[  121.930044][ T5990] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  121.941597][ T5981] ntfs: volume version 3.1.
[  122.267180][ T5996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  122.829045][ T5994] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[  122.834318][ T5994] EXT4-fs (loop0): Remounting filesystem read-only
[  122.841304][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  122.851123][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  122.993482][ T6021] netlink: 'syz.0.413': attribute type 26 has an invalid length.
[  123.054491][ T6017] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.411 (6017)
[  123.064867][ T6017] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.067810][ T6017] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  123.072461][ T6017] BTRFS info (device loop4): using free space tree
[  123.165042][ T6017] BTRFS info (device loop4): enabling ssd optimizations
[  123.186229][ T4338] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.188858][ T6034] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  123.196391][ T6034] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  123.198474][ T6034] REISERFS (device loop0): using ordered data mode
[  123.199585][ T6034] reiserfs: using flush barriers
[  123.213847][ T6034] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  123.221003][ T6034] REISERFS (device loop0): checking transaction log (loop0)
[  123.298386][ T6056] netlink: 24 bytes leftover after parsing attributes in process `syz.1.423'.
[  123.385035][ T6034] REISERFS (device loop0): Using tea hash to sort names
[  123.386400][ T6034] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  123.403995][ T6062] rock: directory entry would overflow storage
[  123.412272][ T6062] rock: sig=0x4654, size=5, remaining=4
[  123.579599][ T6082] netlink: 'syz.0.434': attribute type 5 has an invalid length.
[  123.624273][ T6067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.419 (6067)
[  123.631083][ T6067] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.633698][ T6067] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[  123.635261][ T6067] BTRFS info (device loop4): using free space tree
[  123.685207][ T6072] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.430 (6072)
[  123.731239][ T4318] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4318)
[  123.743361][ T6067] BTRFS info (device loop4): enabling ssd optimizations
[  123.781425][ T4338] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.801964][ T6103] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  123.829526][ T6103] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  123.869020][ T6103] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  124.383117][ T6133] siw: device registration error -23
[  125.336404][ T6158] set_capacity_and_notify: 9 callbacks suppressed
[  125.336414][ T6158] loop4: detected capacity change from 0 to 256
[  125.697335][ T6158] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  125.714880][ T4330] Bluetooth: hci1: Malformed Event: 0x13
[  125.722055][ T6165] device team0 entered promiscuous mode
[  125.730490][ T6165] device team_slave_0 entered promiscuous mode
[  125.731616][ T6165] device team_slave_1 entered promiscuous mode
[  125.933528][ T2063] ieee802154 phy0 wpan0: encryption failed: -22
[  125.935119][ T2063] ieee802154 phy1 wpan1: encryption failed: -22
[  126.174580][ T6181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.470'.
[  126.196716][ T6179] loop0: detected capacity change from 0 to 4096
[  126.207456][ T6183] loop2: detected capacity change from 0 to 1024
[  126.207844][ T6179] ntfs: volume version 3.1.
[  126.210149][ T6183] EXT4-fs: Ignoring removed nobh option
[  126.211131][ T6183] EXT4-fs: inline encryption not supported
[  126.227693][ T6183] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  126.244086][ T6183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  126.300920][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  126.359683][ T6196] loop4: detected capacity change from 0 to 128
[  126.361194][ T6196] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  126.375964][ T6196] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  126.412102][ T6200] xt_CONNSECMARK: invalid mode: 0
[  126.420315][ T4878] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  126.465296][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'.
[  126.469225][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.2.482'.
[  126.768692][ T6220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  126.801993][ T6230] loop0: detected capacity change from 0 to 8
[  126.830195][ T6230] SQUASHFS error: Unable to read inode 0xa7
[  126.911339][ T6240] Set syz1 is full, maxelem 65536 reached
[  127.386502][ T6253] netlink: 'syz.0.503': attribute type 8 has an invalid length.
[  127.439677][ T6260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.507'.
[  127.517192][ T6271] loop2: detected capacity change from 0 to 512
[  127.524116][ T6271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  127.528692][ T6271] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  127.530110][ T6271] System zones: 1-12
[  127.537295][ T6271] EXT4-fs (loop2): 1 truncate cleaned up
[  127.538353][ T6271] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  127.655761][ T6279] loop0: detected capacity change from 0 to 32768
[  127.662577][ T6279] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.515 (6279)
[  127.669464][ T6279] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  127.671357][ T6279] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  127.673092][ T6279] BTRFS info (device loop0): force zlib compression, level 3
[  127.674439][ T6279] BTRFS info (device loop0): force clearing of disk cache
[  127.675856][ T6279] BTRFS info (device loop0): setting nodatasum
[  127.676950][ T6279] BTRFS info (device loop0): use zlib compression, level 3
[  127.678271][ T6279] BTRFS info (device loop0): allowing degraded mounts
[  127.681089][ T6279] BTRFS info (device loop0): enabling disk space caching
[  127.682391][ T6279] BTRFS info (device loop0): disk space caching is enabled
[  127.931664][ T6302] loop4: detected capacity change from 0 to 1024
[  127.938886][ T6302] EXT4-fs: Ignoring removed nomblk_io_submit option
[  127.945631][ T6302] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  127.959948][ T6302] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  127.986002][ T4338] EXT4-fs (loop4): unmounting filesystem.
[  128.027590][ T6279] BTRFS info (device loop0): enabling ssd optimizations
[  128.214556][ T6279] BTRFS info (device loop0): rebuilding free space tree
[  128.321245][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.523'.
[  128.374801][ T6319] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  128.378184][ T6279] BTRFS info (device loop0): disabling free space tree
[  128.378664][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  128.379305][ T6279] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.381971][ T6279] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.487432][ T4331] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  128.565830][ T6340] loop2: detected capacity change from 0 to 512
[  128.568879][ T6340] EXT4-fs (loop2): orphan cleanup on readonly fs
[  128.570018][ T6340] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  128.571761][ T6340] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  128.577430][ T6340] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.532: attempt to clear invalid blocks 2 len 1
[  128.584009][ T6340] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.532: invalid indirect mapped block 1819239214 (level 0)
[  128.586856][ T6340] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.532: invalid indirect mapped block 1819239214 (level 1)
[  128.591729][ T6340] EXT4-fs (loop2): 1 truncate cleaned up
[  128.595359][ T6340] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  128.606579][ T6340] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  128.608686][ T6340] EXT4-fs error (device loop2): __ext4_remount:6650: comm syz.2.532: Abort forced by user
[  128.610628][ T6340] EXT4-fs (loop2): Remounting filesystem read-only
[  128.611796][ T6340] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  128.662677][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  128.704132][ T6350] loop4: detected capacity change from 0 to 2048
[  128.710912][ T6350] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  128.715976][ T6350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.126345][ T4338] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  129.129344][ T4338] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  129.172981][ T6365] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'.
[  129.222676][ T6357] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.540 (6357)
[  129.225818][ T6357] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.227362][ T6357] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[  129.228816][ T6357] BTRFS info (device loop2): force clearing of disk cache
[  129.230079][ T6357] BTRFS info (device loop2): metadata ratio 0
[  129.231169][ T6357] BTRFS info (device loop2): enabling ssd optimizations
[  129.232425][ T6357] BTRFS info (device loop2): using spread ssd allocation scheme
[  129.233749][ T6357] BTRFS info (device loop2): using free space tree
[  129.287804][ T6357] BTRFS info (device loop2): rebuilding free space tree
[  129.315146][ T4334] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  129.549107][ T6400] bond0: option arp_interval: invalid value (18446744073709551615)
[  129.550531][ T6400] bond0: option arp_interval: allowed values 0 - 2147483647
[  129.654346][ T6408] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  129.748283][ T4341] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  129.752093][ T4341] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  129.765168][ T4341] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  129.770396][ T4341] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  129.772023][ T4341] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  129.776188][ T4341] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  130.106118][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.1.561'.
[  130.175134][ T4878] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.180981][ T6430] device macsec1 entered promiscuous mode
[  130.254062][ T4878] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.324603][ T4878] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.394114][ T4878] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.399260][ T6417] chnl_net:caif_netlink_parms(): no params data found
[  130.414585][ T6440] set_capacity_and_notify: 2 callbacks suppressed
[  130.414591][ T6440] loop2: detected capacity change from 0 to 32768
[  130.429789][ T6440] XFS (loop2): Mounting V5 Filesystem
[  130.466786][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.468108][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.474007][ T6417] device bridge_slave_0 entered promiscuous mode
[  130.483675][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.485105][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.486766][ T6417] device bridge_slave_1 entered promiscuous mode
[  130.499207][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.501567][ T6440] XFS (loop2): Ending clean mount
[  130.505893][ T6440] XFS (loop2): Quotacheck needed: Please wait.
[  130.527751][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.531321][ T6440] XFS (loop2): Quotacheck: Done.
[  130.553446][ T6417] team0: Port device team_slave_0 added
[  130.574278][ T4330] Bluetooth: hci2: SCO packet for unknown connection handle 0
[  130.597356][ T6417] team0: Port device team_slave_1 added
[  130.636742][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.637929][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.642384][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.671456][ T6473] loop0: detected capacity change from 0 to 4096
[  130.676674][ T4334] XFS (loop2): Unmounting Filesystem
[  130.694774][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.695917][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.710577][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.717382][ T6473] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  130.720341][ T4878] tipc: Left network mode
[  130.793969][ T6417] device hsr_slave_0 entered promiscuous mode
[  130.813633][ T6417] device hsr_slave_1 entered promiscuous mode
[  130.862632][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.863960][ T6417] Cannot create hsr debugfs directory
[  131.027744][ T6500] loop0: detected capacity change from 0 to 32768
[  131.044347][ T6500] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  131.045714][ T6500] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  131.069786][ T6500] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  131.073152][   T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  131.074220][   T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  131.087957][   T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 13ms
[  131.092161][   T24] gfs2: fsid=syz:syz.0: jid=0: Done
[  131.093883][ T6486] netlink: 9 bytes leftover after parsing attributes in process `syz.1.584'.
[  131.095104][ T6500] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  131.101593][ T6486] device gretap0 entered promiscuous mode
[  131.160108][ T6494] netlink: 5 bytes leftover after parsing attributes in process `syz.1.584'.
[  131.167048][ T6494] 0ªî{X¹¦: renamed from gretap0
[  131.206071][ T6494] device 
30ªî{X¹¦ left promiscuous mode
[  131.207681][ T6494] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  131.213088][ T6508] loop0: detected capacity change from 0 to 1024
[  131.216241][ T6504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'.
[  131.251714][ T6510] loop2: detected capacity change from 0 to 256
[  131.262019][ T6510] exfat: Deprecated parameter 'utf8'
[  131.266150][ T6510] exfat: Deprecated parameter 'utf8'
[  131.279646][ T6510] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  131.302760][ T4507] hfsplus: b-tree write err: -5, ino 25
[  131.303906][ T4507] hfsplus: b-tree write err: -5, ino 4
[  131.304840][ T4507] hfsplus: b-tree write err: -5, ino 2
[  131.355852][ T6520] loop0: detected capacity change from 0 to 512
[  131.388411][ T6520] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  131.397004][ T6520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  131.398532][ T6520] System zones: 1-12
[  131.416961][ T6520] EXT4-fs (loop0): 1 truncate cleaned up
[  131.417931][ T6520] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  131.543831][ T6417] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  131.666908][ T6417] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  131.694650][ T6417] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  131.776195][ T6417] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  131.810046][ T6562] loop2: detected capacity change from 0 to 2048
[  131.815409][ T6562] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  131.832427][ T6562] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  131.841821][ T6562] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.852796][ T4330] Bluetooth: hci4: command 0x0409 tx timeout
[  131.864484][ T6562] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (28) does not match entry length (24)
[  131.941197][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.042120][ T6417] 8021q: adding VLAN 0 to HW filter on device team0
[  132.044214][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  132.045670][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  132.052850][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  132.054397][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  132.055852][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.056974][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.058289][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  132.059810][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  132.061279][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state
[  132.062481][ T4507] bridge0: port 2(bridge_slave_1) entered forwarding state
[  132.070338][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  132.072170][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  132.074368][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.076070][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.145740][ T6417] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  132.147521][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  132.150178][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  132.151723][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.154156][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.155919][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.157861][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.159781][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.161950][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.164927][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.176768][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.191577][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  132.631943][ T6617] loop0: detected capacity change from 0 to 512
[  132.670946][ T6617] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  132.711176][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  132.828276][ T6634] loop0: detected capacity change from 0 to 16
[  132.837754][ T6634] erofs: (device loop0): mounted with root inode @ nid 36.
[  132.841202][ T6634] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  132.850878][ T6634] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -44 in[46, 4050] out[1851]
[  132.853129][ T6634] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117]
[  132.929714][ T6642] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'.
[  133.017858][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  133.019167][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.029955][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.033102][ T6654] loop2: detected capacity change from 0 to 512
[  133.052904][ T6654] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  133.413174][ T6683] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.649 (6683)
[  133.416574][ T6683] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.418626][ T6683] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[  133.421297][ T6683] BTRFS info (device loop2): setting nodatasum
[  133.422284][ T6683] BTRFS info (device loop2): force zlib compression, level 3
[  133.448941][ T6683] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  133.450584][ T6683] BTRFS info (device loop2): use lzo compression, level 0
[  133.451845][ T6683] BTRFS info (device loop2): turning on flush-on-commit
[  133.462579][ T6683] BTRFS info (device loop2): enabling auto defrag
[  133.463741][ T6683] BTRFS info (device loop2): max_inline at 4096
[  133.464806][ T6683] BTRFS info (device loop2): using free space tree
[  133.519382][ T4878] device hsr_slave_0 left promiscuous mode
[  133.546403][ T4878] device hsr_slave_1 left promiscuous mode
[  133.632664][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.634055][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.637129][ T4878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.638327][ T4878] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.639853][ T4878] device bridge_slave_1 left promiscuous mode
[  133.641735][ T4878] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.664032][ T6683] BTRFS info (device loop2): enabling ssd optimizations
[  133.684158][ T4878] device bridge_slave_0 left promiscuous mode
[  133.685322][ T4878] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.774996][ T4334] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.853568][ T4878] device veth1_macvtap left promiscuous mode
[  133.854855][ T4878] device veth0_macvtap left promiscuous mode
[  133.855912][ T4878] device veth1_vlan left promiscuous mode
[  133.856916][ T4878] device veth0_vlan left promiscuous mode
[  133.932716][ T4341] Bluetooth: hci4: command 0x041b tx timeout
[  134.231688][ T6753] ALSA: mixer_oss: invalid OSS volume ''
[  134.301891][ T6755] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.304562][ T6755] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  134.306417][ T6755] REISERFS (device loop2): using ordered data mode
[  134.307775][ T6755] reiserfs: using flush barriers
[  134.309259][ T6755] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.312252][ T6755] REISERFS (device loop2): checking transaction log (loop2)
[  134.317533][ T6755] REISERFS (device loop2): Using r5 hash to sort names
[  134.318801][ T6755] REISERFS (device loop2): using 3.5.x disk format
[  134.320258][ T6755] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  134.517553][ T6762] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.519983][ T6762] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  134.521656][ T6762] REISERFS (device loop2): using ordered data mode
[  134.523030][ T6762] reiserfs: using flush barriers
[  134.524314][ T6762] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.527313][ T6762] REISERFS (device loop2): checking transaction log (loop2)
[  134.529239][ T6762] REISERFS (device loop2): Using rupasov hash to sort names
[  134.530547][ T6762] REISERFS (device loop2): using 3.5.x disk format
[  134.531817][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.534725][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.536723][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.538759][ T6762] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  134.541328][ T6762] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  134.545677][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.547556][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.550247][ T6762] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.552806][ T6761] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  134.706732][ T6773] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  134.710815][ T6773] EXT4-fs (loop2): 1 truncate cleaned up
[  134.711919][ T6773] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  134.725797][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  134.744637][ T6776] exfat: Deprecated parameter 'utf8'
[  134.747976][ T6776] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe1018169, utbl_chksum : 0xe619d30d)
[  134.810752][ T6778] FAT-fs (loop2): Directory bread(block 64) failed
[  134.811992][ T6778] FAT-fs (loop2): Directory bread(block 65) failed
[  134.813454][ T6778] FAT-fs (loop2): Directory bread(block 66) failed
[  134.814636][ T6778] FAT-fs (loop2): Directory bread(block 67) failed
[  134.815819][ T6778] FAT-fs (loop2): Directory bread(block 68) failed
[  134.817126][ T6778] FAT-fs (loop2): Directory bread(block 69) failed
[  134.818293][ T6778] FAT-fs (loop2): Directory bread(block 70) failed
[  134.819384][ T6778] FAT-fs (loop2): Directory bread(block 71) failed
[  134.820602][ T6778] FAT-fs (loop2): Directory bread(block 72) failed
[  134.821782][ T6778] FAT-fs (loop2): Directory bread(block 73) failed
[  134.989508][ T6780] XFS (loop2): Mounting V5 Filesystem
[  135.008713][ T6780] XFS (loop2): Ending clean mount
[  135.011587][ T6780] XFS (loop2): Quotacheck needed: Please wait.
[  135.027586][ T6780] XFS (loop2): Quotacheck: Done.
[  135.044392][ T4334] XFS (loop2): Unmounting Filesystem
[  136.012700][ T4341] Bluetooth: hci4: command 0x040f tx timeout
[  136.291207][ T6796] set_capacity_and_notify: 8 callbacks suppressed
[  136.291215][ T6796] loop2: detected capacity change from 0 to 1764
[  136.474308][ T4878] team0 (unregistering): Port device team_slave_1 removed
[  136.633569][ T4878] team0 (unregistering): Port device team_slave_0 removed
[  136.793191][ T4878] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.012932][ T4878] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.102578][ T4341] Bluetooth: hci4: command 0x0419 tx timeout
[  138.533798][ T4878] bond0 (unregistering): Released all slaves
[  138.850116][ T6767] netlink: 196 bytes leftover after parsing attributes in process `syz.0.677'.
[  138.911959][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  138.913686][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  138.952764][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  138.954394][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  138.956185][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  138.957713][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  138.970260][ T6417] device veth0_vlan entered promiscuous mode
[  138.983538][ T6417] device veth1_vlan entered promiscuous mode
[  139.018550][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.020102][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.021499][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.026308][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.030014][ T6417] device veth0_macvtap entered promiscuous mode
[  139.038135][ T6826] loop2: detected capacity change from 0 to 1024
[  139.038415][ T6821] loop0: detected capacity change from 0 to 4096
[  139.056940][ T6417] device veth1_macvtap entered promiscuous mode
[  139.086968][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.088588][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.090256][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.091916][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.113811][ T6821] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  139.127599][ T6821] ntfs: volume version 3.1.
[  139.132908][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.134603][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.136246][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.153614][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.439479][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.440808][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.444068][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.445720][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.455155][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.472076][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.476899][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.478665][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.480451][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.482189][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.486697][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.488311][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.501012][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.503350][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1
[  139.505782][ T6417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  139.507300][ T6417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  139.508742][ T6417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  139.510130][ T6417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  139.513773][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  139.528079][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  139.574542][ T4507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.575882][ T4507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.591270][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.659218][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.660542][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.661793][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.844220][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.708'.
[  139.852166][ T6878] loop5: detected capacity change from 0 to 1024
[  139.975669][ T6878] hfsplus: catalog searching failed
[  140.033615][ T6894] loop5: detected capacity change from 0 to 512
[  140.095274][ T6894] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  140.111496][ T6417] EXT4-fs (loop5): unmounting filesystem.
[  140.631171][ T6930] loop5: detected capacity change from 0 to 128
[  140.670393][ T6933] loop2: detected capacity change from 0 to 512
[  140.676651][ T6933] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  140.685598][ T6933] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  140.687311][ T6933] System zones: 1-12
[  140.689064][ T6933] EXT4-fs (loop2): 1 truncate cleaned up
[  140.689985][ T6933] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  141.030360][ T6975] loop5: detected capacity change from 0 to 64
[  141.194357][ T6988] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  141.195635][ T6988] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  141.307536][ T6998] loop0: detected capacity change from 0 to 764
[  141.328735][ T6998] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  141.407791][ T7007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.746'.
[  141.420684][ T7009] netlink: 27 bytes leftover after parsing attributes in process `syz.0.745'.
[  141.468353][ T7012] sock: sock_set_timeout: `syz.1.747' (pid 7012) tries to set negative timeout
[  141.690806][ T7014] loop0: detected capacity change from 0 to 32768
[  141.706614][ T7014] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.748 (7014)
[  141.726168][ T7014] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.728012][ T7014] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  141.729410][ T7014] BTRFS info (device loop0): using free space tree
[  141.817185][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'.
[  141.827854][ T7014] BTRFS info (device loop0): enabling ssd optimizations
[  141.868218][ T4331] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  141.945881][ T4334] EXT4-fs (loop2): unmounting filesystem.
[  142.149523][ T7078] device gtp0 entered promiscuous mode
[  142.221822][ T7071] loop0: detected capacity change from 0 to 32768
[  142.230951][ T7071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.762 (7071)
[  142.246514][ T7071] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.248262][ T7071] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[  142.250184][ T7071] BTRFS info (device loop0): using free space tree
[  142.392608][ T7071] BTRFS info (device loop0): enabling ssd optimizations
[  142.429083][ T7127] fuse: Bad value for 'fd'
[  142.491196][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.780'.
[  142.501877][ T4331] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.647990][ T7106] loop5: detected capacity change from 0 to 32768
[  142.669259][ T7106] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.771 (7106)
[  142.686211][ T7106] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.687809][ T7106] BTRFS info (device loop5): using crc32c (crc32c-generic) checksum algorithm
[  142.689195][ T7106] BTRFS info (device loop5): turning on sync discard
[  142.698077][ T7154] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input3
[  142.702601][ T7106] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  142.704245][ T7106] BTRFS info (device loop5): use zstd compression, level 3
[  142.705555][ T7106] BTRFS info (device loop5): turning on async discard
[  142.710910][ T7106] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  142.713748][ T7106] BTRFS info (device loop5): trying to use backup root at mount time
[  142.715347][ T7106] BTRFS info (device loop5): enabling auto defrag
[  142.716524][ T7106] BTRFS info (device loop5): using free space tree
[  142.761485][ T4490] BTRFS warning (device loop5): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  142.767067][ T7106] BTRFS error (device loop5): failed to load root extent
[  142.768121][ T7106] BTRFS warning (device loop5): try to load backup roots slot 1
[  142.771238][   T39] BTRFS warning (device loop5): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  142.776782][ T7106] BTRFS warning (device loop5): couldn't read tree root
[  142.777947][ T7106] BTRFS warning (device loop5): try to load backup roots slot 2
[  142.779533][ T7106] BTRFS error (device loop5): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  142.781645][ T7106] BTRFS warning (device loop5): couldn't read tree root
[  142.784300][ T7106] BTRFS warning (device loop5): try to load backup roots slot 3
[  142.788767][ T7106] BTRFS info (device loop5): enabling ssd optimizations
[  142.790710][ T7106] BTRFS info (device loop5): rebuilding free space tree
[  142.802248][ T7106] BTRFS info (device loop5): checking UUID tree
[  142.926089][ T7197] netlink: 'syz.1.798': attribute type 29 has an invalid length.
[  142.927704][ T7197] netlink: 'syz.1.798': attribute type 29 has an invalid length.
[  142.929904][ T7197] netlink: 'syz.1.798': attribute type 29 has an invalid length.
[  142.931334][ T7197] netlink: 'syz.1.798': attribute type 29 has an invalid length.
[  142.935702][ T7197] netlink: 'syz.1.798': attribute type 29 has an invalid length.
[  142.990007][ T6417] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  143.176094][ T7221] o2cb: This node has not been configured.
[  143.177188][ T7221] o2cb: Cluster check failed. Fix errors before retrying.
[  143.191111][ T7221] (syz.5.807,7221,0):user_dlm_register:674 ERROR: status = -22
[  143.192396][ T7221] (syz.5.807,7221,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1"
[  143.237443][ T7224] Zero length message leads to an empty skb
[  143.253253][ T7226] netlink: 44 bytes leftover after parsing attributes in process `syz.5.810'.
[  143.291836][ T7220] loop0: detected capacity change from 0 to 32768
[  143.307808][ T7220] (syz.0.808,7220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  143.310601][ T7220] (syz.0.808,7220,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  143.329145][ T7220] JBD2: Ignoring recovery information on journal
[  143.385774][ T7220] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  143.489813][ T4331] ocfs2: Unmounting device (7,0) on (node local)
[  143.549763][ T7260] loop2: detected capacity change from 0 to 256
[  143.559969][ T7260] FAT-fs (loop2): Directory bread(block 64) failed
[  143.561102][ T7260] FAT-fs (loop2): Directory bread(block 65) failed
[  143.562236][ T7260] FAT-fs (loop2): Directory bread(block 66) failed
[  143.595842][ T7260] FAT-fs (loop2): Directory bread(block 67) failed
[  143.597026][ T7260] FAT-fs (loop2): Directory bread(block 68) failed
[  143.598078][ T7260] FAT-fs (loop2): Directory bread(block 69) failed
[  143.599269][ T7260] FAT-fs (loop2): Directory bread(block 70) failed
[  143.600367][ T7260] FAT-fs (loop2): Directory bread(block 71) failed
[  143.601418][ T7260] FAT-fs (loop2): Directory bread(block 72) failed
[  143.622614][ T7260] FAT-fs (loop2): Directory bread(block 73) failed
[  143.697059][ T7276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.828'.
[  143.759864][ T7287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'.
[  143.799432][ T7282] netlink: 36 bytes leftover after parsing attributes in process `syz.3.832'.
[  143.848397][ T7295] Illegal XDP return value 4294967274 on prog  (id 52) dev syz_tun, expect packet loss!
[  144.188672][ T7209] binder: undelivered death notification, 0000000000000000
[  144.221941][ T7349] __nla_validate_parse: 1 callbacks suppressed
[  144.221948][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'.
[  144.738744][ T7387] loop2: detected capacity change from 0 to 64
[  144.787371][ T7391] netlink: 'syz.5.872': attribute type 4 has an invalid length.
[  144.796520][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.872'.
[  144.855578][ T7393] netlink: 5 bytes leftover after parsing attributes in process `syz.5.874'.
[  144.901861][ T7397] input: syz0 as /devices/virtual/input/input4
[  145.330571][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.880'.
[  145.361599][ T4330] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.365090][ T4330] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.366982][ T4330] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.368753][ T4330] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.370927][ T4330] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  145.372280][ T4330] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  145.574121][ T7410] chnl_net:caif_netlink_parms(): no params data found
[  145.592490][ T7438] sctp: [Deprecated]: syz.1.891 (pid 7438) Use of int in max_burst socket option deprecated.
[  145.592490][ T7438] Use struct sctp_assoc_value instead
[  145.605448][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.617554][ T7410] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.619176][ T7410] device bridge_slave_0 entered promiscuous mode
[  145.623401][ T7410] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.626507][ T7410] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.631679][ T7410] device bridge_slave_1 entered promiscuous mode
[  145.649671][ T7410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.658960][ T7410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.687846][ T7410] team0: Port device team_slave_0 added
[  145.689841][ T7410] team0: Port device team_slave_1 added
[  145.705516][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_0
[  145.706582][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.711015][ T7410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  145.723547][ T7410] batman_adv: batadv0: Adding interface: batadv_slave_1
[  145.724694][ T7410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  145.737541][ T7410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.064671][ T7410] device hsr_slave_0 entered promiscuous mode
[  146.102816][ T7410] device hsr_slave_1 entered promiscuous mode
[  146.182863][ T7410] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  146.184695][ T7410] Cannot create hsr debugfs directory
[  146.214575][ T7448] netlink: 'syz.3.896': attribute type 2 has an invalid length.
[  146.335127][ T7410] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  146.411879][ T7410] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  146.784234][ T7410] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  146.823693][ T7410] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  146.907721][ T7410] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.915477][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.917219][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.920580][ T7410] 8021q: adding VLAN 0 to HW filter on device team0
[  146.927415][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.929289][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.931033][ T4878] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.932787][ T4878] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.939130][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.941007][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.946544][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.948657][ T4878] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.949912][ T4878] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.951498][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.972403][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.975476][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.979287][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.986690][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.992466][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.996573][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  147.000523][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  147.007575][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  147.011522][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  147.015930][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  147.021344][ T7410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.133040][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  147.134382][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  147.144023][ T7410] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.151208][ T7491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.907'.
[  147.176952][ T7488] device ip6gre1 entered promiscuous mode
[  147.250204][ T7499] loop5: detected capacity change from 0 to 512
[  147.266765][ T7499] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  147.272094][ T7499] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  147.273579][ T7499] System zones: 1-12
[  147.286880][ T7499] EXT4-fs (loop5): 1 truncate cleaned up
[  147.287889][ T7499] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  147.637155][ T4341] Bluetooth: hci3: command 0x0409 tx timeout
[  147.812120][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  147.814087][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  147.838162][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  147.840005][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  147.843165][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  147.846156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  147.852098][ T7410] device veth0_vlan entered promiscuous mode
[  147.856655][ T7410] device veth1_vlan entered promiscuous mode
[  147.871488][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  147.874198][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  147.875937][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  147.877657][ T4532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  147.881062][ T7410] device veth0_macvtap entered promiscuous mode
[  147.885628][ T7410] device veth1_macvtap entered promiscuous mode
[  147.890278][ T7521] netlink: 27 bytes leftover after parsing attributes in process `syz.0.915'.
[  147.895086][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.897150][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.898856][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.900527][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.914617][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.916486][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.917401][ T7523] loop0: detected capacity change from 0 to 512
[  147.918355][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.926582][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.928264][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  147.930151][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.935985][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.938440][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  147.940362][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  147.941973][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.944150][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.946774][ T7523] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  147.951578][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.954116][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.955847][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.957571][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.959271][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.961184][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.965933][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.967731][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.969510][ T7410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.971501][ T7410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.974131][ T7410] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.975654][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.976844][ T7523] block device autoloading is deprecated and will be removed.
[  147.977366][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.978733][ T7523] I/O error, dev loop20, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  147.981531][ T7523] EXT4-fs (loop0): couldn't read superblock of external journal
[  147.982205][ T7410] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.984379][ T7410] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.985834][ T7410] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.987415][ T7410] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.046308][ T4878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.047857][ T4878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.049296][  T231] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.067802][ T4507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.069248][ T4507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.071679][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.107676][ T6417] EXT4-fs (loop5): unmounting filesystem.
[  148.453353][ T7556] loop6: detected capacity change from 0 to 512
[  148.458897][ T7556] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  148.515005][ T7556] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  148.516474][ T7556] System zones: 1-12
[  148.528023][ T7556] EXT4-fs (loop6): 1 truncate cleaned up
[  148.530169][ T7556] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  148.907765][ T7567] netlink: 'syz.1.931': attribute type 1 has an invalid length.
[  148.912639][ T7567] netlink: 'syz.1.931': attribute type 4 has an invalid length.
[  148.913913][ T7567] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.931'.
[  149.577600][ T7410] EXT4-fs (loop6): unmounting filesystem.
[  149.692693][ T4341] Bluetooth: hci3: command 0x041b tx timeout
[  149.789894][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.941'.
[  149.827325][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.941'.
[  149.828977][ T7599] m: renamed from bond1
[  151.279079][ T7734] loop6: detected capacity change from 0 to 512
[  151.368435][ T7734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  151.394999][ T7734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  151.396357][ T7734] System zones: 1-12
[  151.401009][ T7734] EXT4-fs (loop6): 1 truncate cleaned up
[  151.401956][ T7734] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  151.773367][ T4341] Bluetooth: hci3: command 0x040f tx timeout
[  152.266062][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'.
[  152.274579][ T7796] netlink: 12 bytes leftover after parsing attributes in process `syz.3.996'.
[  152.546577][ T7410] EXT4-fs (loop6): unmounting filesystem.
[  152.694282][ T7829] 8021q: VLANs not supported on syzkaller0
[  152.858485][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  152.861460][ T4850] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  153.065570][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready
[  153.158264][ T7847] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  153.162338][ T4850] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  153.183516][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready
[  153.207046][ T7845] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  153.224592][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): 
30ªî{X¹¦: link becomes ready
[  153.227588][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready
[  153.229828][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready
[  153.232035][ T7839] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready
[  153.616425][ T4330] Bluetooth: hci0: command 0x0406 tx timeout
[  153.617535][ T4330] Bluetooth: hci1: command 0x0406 tx timeout
[  153.618573][ T4330] Bluetooth: hci2: command 0x0406 tx timeout
[  153.654963][ T7875] loop6: detected capacity change from 0 to 512
[  153.681500][ T7875] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  153.702313][ T7875] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[  153.706574][ T7875] System zones: 1-12
[  153.720662][ T7875] EXT4-fs (loop6): 1 truncate cleaned up
[  153.721649][ T7875] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  153.841401][ T7884] 9pnet: p9_errstr2errno: server reported unknown error 000000000
[  153.862797][ T4341] Bluetooth: hci3: command 0x0419 tx timeout
[  154.121220][ T7853] loop5: detected capacity change from 0 to 131072
[  154.143324][ T7853] F2FS-fs (loop5): inline encryption not supported
[  154.211261][ T7853] F2FS-fs (loop5): Test dummy encryption mode enabled
[  154.216435][ T7853] F2FS-fs (loop5): invalid crc value
[  154.220152][ T7853] F2FS-fs (loop5): Found nat_bits in checkpoint
[  154.234996][ T7853] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  154.245826][ T7853] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  154.808496][ T7410] EXT4-fs (loop6): unmounting filesystem.
[  154.851363][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.864040][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.865840][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.867766][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.870621][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.872461][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.891392][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  154.901427][ T7976] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  155.101534][ T8006] overlayfs: failed to clone upperpath
[  155.325718][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'.
[  155.447375][ T8034] device syzkaller0 entered promiscuous mode
[  156.604479][ T4330] Bluetooth: hci3: command 0x0405 tx timeout
[  157.821371][ T8145] Injecting memory failure for pfn 0x11816c at process virtual address 0x20003000
[  157.825215][ T8145] Memory failure: 0x11816c: Failed to invalidate
[  157.826911][ T8145] Memory failure: 0x11816c: clean unevictable LRU page still referenced by 2 users
[  157.828499][ T8145] Memory failure: 0x11816c: recovery action for clean unevictable LRU page: Failed
[  168.108751][ T8159] netlink: 'syz.6.1103': attribute type 1 has an invalid length.
[  168.130150][ T8162] netlink: 'syz.6.1103': attribute type 10 has an invalid length.
[  168.131470][ T8162] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1103'.
[  168.139982][ T8162] device dummy0 entered promiscuous mode
[  168.141121][ T8162] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready
[  168.173120][ T8179] binder: 8174:8179 tried to acquire reference to desc 0, got 1 instead
[  168.220851][ T8184] loop6: detected capacity change from 0 to 256
[  168.222225][ T8184] exfat: Bad value for 'uid'
[  168.253521][ T8187] binder: 8174:8187 BC_FREE_BUFFER u0000000000000000 no match
[  168.262183][ T4315] binder: release 8174:8179 transaction 31 out, still active
[  168.263666][ T4315] binder: undelivered TRANSACTION_COMPLETE
[  168.264737][ T4315] binder: send failed reply for transaction 31, target dead
[  168.821448][ T8191] netlink: 240 bytes leftover after parsing attributes in process `syz.5.1112'.
[  168.961331][ T8198] Cannot find add_set index 0 as target
[  169.204864][ T8202] loop0: detected capacity change from 0 to 1024
[  169.263857][ T8210] device syzkaller0 entered promiscuous mode
[  169.309896][ T8202] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  169.353181][ T8214] loop6: detected capacity change from 0 to 256
[  169.650355][ T8214] FAT-fs (loop6): Directory bread(block 64) failed
[  169.651564][ T8214] FAT-fs (loop6): Directory bread(block 65) failed
[  169.652958][ T8214] FAT-fs (loop6): Directory bread(block 66) failed
[  169.654012][ T8214] FAT-fs (loop6): Directory bread(block 67) failed
[  169.655195][ T8214] FAT-fs (loop6): Directory bread(block 68) failed
[  169.657239][ T8214] FAT-fs (loop6): Directory bread(block 69) failed
[  169.658473][ T8214] FAT-fs (loop6): Directory bread(block 70) failed
[  169.659679][ T8214] FAT-fs (loop6): Directory bread(block 71) failed
[  169.660783][ T8214] FAT-fs (loop6): Directory bread(block 72) failed
[  169.662011][ T8214] FAT-fs (loop6): Directory bread(block 73) failed
[  169.736746][ T4331] EXT4-fs (loop0): unmounting filesystem.
[  170.043561][ T8223] process 'syz.6.1119' launched './file0' with NULL argv: empty string added
[  170.053965][ T8223] syz.6.1119: attempt to access beyond end of device
[  170.053965][ T8223] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256
[  170.057629][ T8223] syz.6.1119: attempt to access beyond end of device
[  170.057629][ T8223] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256
[  170.393600][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.395542][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.197135][ T8241] loop6: detected capacity change from 0 to 256
[  171.210998][ T8241] FAT-fs (loop6): Directory bread(block 64) failed
[  171.212298][ T8241] FAT-fs (loop6): Directory bread(block 65) failed
[  171.218707][ T8241] FAT-fs (loop6): Directory bread(block 66) failed
[  171.219971][ T8241] FAT-fs (loop6): Directory bread(block 67) failed
[  171.221278][ T8241] FAT-fs (loop6): Directory bread(block 68) failed
[  171.222484][ T8241] FAT-fs (loop6): Directory bread(block 69) failed
[  171.223944][ T8241] FAT-fs (loop6): Directory bread(block 70) failed
[  171.225248][ T8241] FAT-fs (loop6): Directory bread(block 71) failed
[  171.226580][ T8241] FAT-fs (loop6): Directory bread(block 72) failed
[  171.227771][ T8241] FAT-fs (loop6): Directory bread(block 73) failed
[  171.368406][ T8249] binder: 8248:8249 tried to acquire reference to desc 0, got 1 instead
[  171.370404][ T8249] binder: 8248:8249 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  171.373175][ T8249] binder: 8249 RLIMIT_NICE not set
[  171.374061][ T8249] binder: 8249 RLIMIT_NICE not set
[  171.376136][ T8249] binder: release 8248:8249 transaction 36 in, still active
[  171.393237][ T8249] binder: send failed reply for transaction 36 to 8248:8249
[  171.452724][ T7209] binder: undelivered TRANSACTION_COMPLETE
[  171.453696][ T7209] binder: undelivered TRANSACTION_ERROR: 29189
[  171.551630][ T8265] binder: BINDER_SET_CONTEXT_MGR already set
[  171.554926][ T8265] binder: 8264:8265 ioctl 4018620d 20004a80 returned -16
[  171.562327][ T8219] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.562344][ T8265] binder: tried to use weak ref as strong ref
[  171.568188][ T8265] binder: 8264:8265 Acquire 1 refcount change on invalid ref 0 ret -22
[  171.573420][ T8265] binder: 8264:8265 got transaction to invalid handle, 1
[  171.574668][ T8265] binder: 8265:8264 cannot find target node
[  171.575708][ T8265] binder: 8264:8265 transaction call to 0:0 failed 39/29201/-22, size 0-0 line 3045
[  171.579158][ T8265] binder: 8264:8265 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  171.588916][ T8219] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.630137][ T8269] binder: 8264:8269 transaction reply to 0:0 failed 40/29201/-71, size 0-0 line 2946
[  171.889473][ T8219] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.891178][ T8219] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.892692][ T8219] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  171.894143][ T8219] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  172.046994][ T8271] device syzkaller0 entered promiscuous mode
[  172.289736][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1135'.
[  172.953040][ T8310] loop5: detected capacity change from 0 to 128
[  172.954644][ T8310] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  172.957115][ T8310] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  173.235660][ T4392] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.263976][ T8327] loop0: detected capacity change from 0 to 128
[  175.919791][ T8359] fuse: Bad value for 'fd'
[  176.203936][ T8370] binder_user_error: 6 callbacks suppressed
[  176.203943][ T8370] binder: 8369:8370 tried to acquire reference to desc 0, got 1 instead
[  176.207159][ T8370] binder: 8369:8370 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  176.209421][ T8370] binder: 8370 RLIMIT_NICE not set
[  176.210228][ T8370] binder: 8370 RLIMIT_NICE not set
[  176.211489][ T8370] binder_debug: 8 callbacks suppressed
[  176.211494][ T8370] binder: release 8369:8370 transaction 64 out, still active
[  176.213834][ T8370] binder: release 8369:8370 transaction 57 in, still active
[  176.222959][ T8370] binder: undelivered TRANSACTION_COMPLETE
[  176.230916][ T8370] binder: 8369:8370 got new transaction with bad transaction stack, transaction 57 has target 0:0
[  176.234959][ T8370] binder: 8369:8370 transaction call to 8369:0 failed 65/29201/-71, size 0-0 line 3105
[  176.270257][ T4463] binder: release 8369:8370 transaction 57 out, still active
[  176.271531][ T4463] binder: undelivered TRANSACTION_COMPLETE
[  176.272947][ T4463] binder: send failed reply for transaction 64, target dead
[  176.274212][ T4463] binder: send failed reply for transaction 57, target dead
[  176.275446][ T4463] binder: undelivered TRANSACTION_ERROR: 29201
[  176.388913][ T8380] hub 8-0:1.0: USB hub found
[  176.402158][ T8380] hub 8-0:1.0: 8 ports detected
[  178.931533][ T8429] tipc: Started in network mode
[  178.932465][ T8429] tipc: Node identity 080211000001, cluster identity 4711
[  178.937226][ T8429] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.958105][ T8430] binder: 8427:8430 ioctl 4018620d 0 returned -22
[  178.960000][ T8430] binder: 8427:8430 ioctl c0306201 0 returned -14
[  178.965536][ T8430] binder: 8427:8430 ioctl c0306201 0 returned -14
[  179.352611][    C0] Unable to handle kernel paging request at virtual address dfff800000000000
[  179.354390][    C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  179.355806][    C0] Mem abort info:
[  179.356407][    C0]   ESR = 0x0000000096000006
[  179.357250][    C0]   EC = 0x25: DABT (current EL), IL = 32 bits
[  179.358325][    C0]   SET = 0, FnV = 0
[  179.358918][    C0]   EA = 0, S1PTW = 0
[  179.359599][    C0]   FSC = 0x06: level 2 translation fault
[  179.360626][    C0] Data abort info:
[  179.361251][    C0]   ISV = 0, ISS = 0x00000006
[  179.362067][    C0]   CM = 0, WnR = 0
[  179.362797][    C0] [dfff800000000000] address between user and kernel address ranges
[  179.363816][ T8440] loop0: detected capacity change from 0 to 1024
[  179.364292][    C0] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
[  179.365741][ T8440] EXT4-fs: Ignoring removed nomblk_io_submit option
[  179.366347][    C0] Modules linked in:
[  179.366358][    C0] CPU: 0 PID: 8438 Comm: syz.6.1183 Not tainted syzkaller #0
[  179.369363][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  179.370979][    C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  179.372255][    C0] pc : fq_codel_enqueue+0x870/0x10d8
[  179.373198][    C0] lr : fq_codel_enqueue+0x7e4/0x10d8
[  179.374084][    C0] sp : ffff800008007560
[  179.374722][    C0] x29: ffff800008007670 x28: 0000000000000000 x27: 0000000000000000
[  179.376108][    C0] x26: 0000000000000000 x25: 0000000000000001 x24: ffff000102e50000
[  179.377505][    C0] x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000001
[  179.378898][    C0] x20: ffff0000c3ce92d0 x19: 0000000000000000 x18: 0000000000000000
[  179.380284][    C0] x17: 00000000ffff0000
[  179.380290][ T8440] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  179.380294][    C0]  x16: ffff8000082d93d8 x15: 0000000000000000
[  179.381088][    C0] x14: 0000000000000003 x13: 1ffff00002a46071 x12: 0000000000ff0100
[  179.381103][    C0] x11: ff0080001005331c x10: dfff800000000000 x9 : 1fffe000205ca000
[  179.386851][    C0] x8 : 0000000000000000 x7 : ffff8000083c1cf0 x6 : 0000000000000000
[  179.388289][    C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000
[  179.389620][    C0] x2 : ffff0000c3ce9328 x1 : 0000000000000000 x0 : 0000000000000000
[  179.390958][    C0] Call trace:
[  179.391495][    C0]  fq_codel_enqueue+0x870/0x10d8
[  179.392343][    C0]  cbs_enqueue_soft+0x14c/0x230
[  179.393139][    C0]  cbs_enqueue+0x54/0x68
[  179.393908][    C0]  dev_qdisc_enqueue+0x5c/0x388
[  179.394800][    C0]  __dev_queue_xmit+0xaf8/0x3118
[  179.395654][    C0]  tipc_l2_send_msg+0x29c/0x35c
[  179.396534][    C0]  tipc_bearer_xmit_skb+0x240/0x380
[  179.397405][    C0]  tipc_disc_timeout+0x4d8/0x628
[  179.398268][    C0]  call_timer_fn+0x1b8/0x95c
[  179.399081][    C0]  __run_timers+0x478/0x6f0
[  179.399837][    C0]  run_timer_softirq+0x7c/0x114
[  179.400625][    C0]  handle_softirqs+0x318/0xc60
[  179.401409][    C0]  __do_softirq+0x14/0x20
[  179.402222][    C0]  ____do_softirq+0x14/0x20
[  179.402998][    C0]  call_on_irq_stack+0x30/0x48
[  179.403773][    C0]  do_softirq_own_stack+0x20/0x2c
[  179.404604][    C0]  __irq_exit_rcu+0x23c/0x438
[  179.405423][    C0]  irq_exit_rcu+0x14/0x84
[  179.406119][    C0]  el1_interrupt+0x38/0x54
[  179.406861][    C0]  el1h_64_irq_handler+0x18/0x24
[  179.407729][    C0]  el1h_64_irq+0x64/0x68
[  179.408494][    C0]  arch_local_irq_restore+0x8/0x10
[  179.409386][    C0]  mas_next_entry+0x640/0xd08
[  179.410113][    C0]  mas_find+0xd4/0x224
[  179.410783][    C0]  validate_mm+0x1b8/0x29c
[  179.411449][    C0]  vma_expand+0x658/0x6fc
[  179.412113][    C0]  mmap_region+0xb5c/0x1900
[  179.412818][    C0]  do_mmap+0x9cc/0x1138
[  179.413554][    C0]  vm_mmap_pgoff+0x190/0x294
[  179.414259][    C0]  ksys_mmap_pgoff+0x3b8/0x5a0
[  179.415033][    C0]  __arm64_sys_mmap+0xf8/0x110
[  179.415841][    C0]  invoke_syscall+0x98/0x2b4
[  179.416644][    C0]  el0_svc_common+0x138/0x258
[  179.417457][    C0]  do_el0_svc+0x58/0x130
[  179.418214][    C0]  el0_svc+0x58/0x128
[  179.418934][    C0]  el0t_64_sync_handler+0x84/0xf0
[  179.419776][    C0]  el0t_64_sync+0x18c/0x190
[  179.420530][    C0] Code: d2d0000a f2fbffea f9400317 d343fee8 (386a6908) 
[  179.421731][    C0] ---[ end trace 0000000000000000 ]---
[  179.450718][ T8440] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  179.700831][    C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt
[  179.701969][    C0] SMP: stopping secondary CPUs
[  179.702693][    C0] Kernel Offset: disabled
[  179.703279][    C0] CPU features: 0x080000,000f0097,a65bfea7
[  179.704114][    C0] Memory Limit: none
[  179.977210][    C0] Rebooting in 86400 seconds..